ghost 95f6451b39 feat(sync): add Brex provider connections (#1752) ...

* feat(sync): add Brex provider schema

Adds Brex item and account tables with per-family credentials, scoped upstream account uniqueness, encrypted token storage, and sanitized provider payload columns.

* feat(sync): add Brex provider core

Adds Brex item/account models, provider client and adapter support, family connection helpers, and provider enum registration for read-only Brex cash and card data.

* feat(sync): add Brex import pipeline

Adds Brex account discovery, linked-account sync, cash/card balance processors, transaction import, sanitized metadata handling, and idempotent provider entry processing.

* feat(sync): add Brex connection flows

Adds Mercury-style Brex connection management, explicit item-scoped account selection and linking, settings provider UI, account index visibility, localized copy, and per-item cache handling.

* test(sync): cover Brex provider workflows

Adds targeted coverage for Brex provider requests, adapter config, item/account guards, importer behavior, entry processing, and Mercury-style controller flows.

* fix(sync): align Brex API edge cases

Tightens Brex account fetching against the official card-account response shape, sends transaction start filters as RFC3339 date-times, and keeps provider error bodies out of user-facing messages while expanding provider client guard coverage.

* fix(sync): harden Brex provider integration

Restrict Brex API base URLs to official hosts, tighten account-selection UI behavior, and add tests for invalid credentials, cache scoping, and provider setup edge cases.

* test(sync): avoid Brex secret-shaped fixtures

* refactor(sync): extract Brex account flows

* fix(sync): address Brex provider review feedback

* fix(sync): address Brex review follow-ups

Move remaining Brex review cleanup into focused model behavior, tighten link/setup edge cases, localize summaries, and add regression coverage from CodeRabbit feedback.

Also records the security-review pass as no-findings after diff-scoped inspection and Brakeman validation.

* refactor(sync): split Brex account flow controllers

Route Brex account selection and setup actions through small namespaced controllers while keeping existing URLs and helpers stable.

Business flow remains in BrexItem::AccountFlow; the main Brex item controller now only handles connection CRUD, provider-panel rendering, destroy, and sync.

* fix(sync): address Brex CodeRabbit review

* fix(sync): address Brex follow-up review

* fix(sync): address Brex review follow-ups

* fix(sync): address Brex sync review findings

* fix(sync): polish Brex review copy and errors

* fix(sync): register Brex provider health

* fix(sync): polish Brex bank sync presentation

* fix(sync): address Brex review follow-ups

* fix(sync): tighten Brex setup params

* test(api): stabilize usage rate-limit window

* fix(sync): polish Brex setup flow nits

* fix(sync): harden Brex setup params

* fix(sync): finalize Brex review cleanup

---------

Signed-off-by: Juan José Mata <juanjo.mata@gmail.com>
Co-authored-by: Juan José Mata <juanjo.mata@gmail.com>

2026-05-13 18:13:48 +02:00

..

account

fix(enable-banking): fix pending→posted auto-claim producing badge, duplicate, and wrong date (#1783)

2026-05-13 14:03:37 +02:00

assistant

fix(chat): eager pending AssistantMessage to fix Turbo subscribe race (#1657) (#1658)

2026-05-03 20:33:29 +02:00

balance

Add Interactive Brokers Provider (#1722)

2026-05-12 23:45:19 +02:00

balance_sheet

perf(accounts): kill sidebar/sparkline N+1s and cache the sidebar (#1683)

2026-05-07 17:31:16 +02:00

binance_account

Fix Binance USD converter custom rate keyword (#1414)

2026-04-08 22:23:15 +02:00

binance_item

Add Binance support, heavily inspired by the Coinbase one (#1317)

2026-04-07 14:43:17 +02:00

brex_account

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

brex_entry

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

brex_item

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

chat

Personal finance AI (v1) (#2022)

2025-03-28 13:08:22 -04:00

coinbase_account

Add Coinbase exchange integration with CDP API support (#704)

2026-01-21 22:56:39 +01:00

coinbase_item

Add Coinbase exchange integration with CDP API support (#704)

2026-01-21 22:56:39 +01:00

coinstats_account

Add DeFi via Coinstats (#1417)

2026-04-11 21:37:07 +02:00

coinstats_entry

Add CoinStats exchange portfolio sync and normalize linked investment charts (#1308)

2026-04-01 20:25:06 +02:00

coinstats_item

Add DeFi via Coinstats (#1417)

2026-04-11 21:37:07 +02:00

concerns

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

demo

Make categories global (#1160)

2026-03-11 15:54:01 +01:00

enable_banking_account

fix(enable-banking): fix pending→posted auto-claim producing badge, duplicate, and wrong date (#1783)

2026-05-13 14:03:37 +02:00

enable_banking_entry

fix(enable-banking): import transactions missing transaction_id and entry_reference (#1767)

2026-05-12 00:17:49 +02:00

enable_banking_item

fix(enable-banking): gracefully skip PDNG fetch for ASPSPs that don't support it (#1789)

2026-05-13 17:54:09 +02:00

eval

feat: add SSL_CA_FILE and SSL_VERIFY environment variables to support… (#894)

2026-02-06 18:04:03 +01:00

exchange_rate

Add improvements from security providers to FX providers also (#1445)

2026-04-13 00:51:23 +02:00

family

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

holding

Add Interactive Brokers Provider (#1722)

2026-05-12 23:45:19 +02:00

ibkr_account

Add Interactive Brokers Provider (#1722)

2026-05-12 23:45:19 +02:00

ibkr_item

Add Interactive Brokers Provider (#1722)

2026-05-12 23:45:19 +02:00

import

feat(api): add import preflight validation (#1755)

2026-05-12 00:00:49 +02:00

income_statement

feat(enable-banking): enhance transaction import, metadata handling, and UI (#1406)

2026-04-10 23:19:48 +02:00

indexa_capital_account

Fix IndexaCapital sync, account setup, and balance/type bugs (#1562)

2026-04-27 18:33:22 +02:00

indexa_capital_item

Fix IndexaCapital sync, account setup, and balance/type bugs (#1562)

2026-04-27 18:33:22 +02:00

investment_statement

Add investment tracking to expenses (#381)

2026-01-09 13:03:40 +01:00

kraken_account

feat(providers): add Kraken exchange sync (#1759)

2026-05-12 00:22:37 +02:00

kraken_item

feat(providers): add Kraken exchange sync (#1759)

2026-05-12 00:22:37 +02:00

lunchflow_account

Remove InvestmentActivityDetector and related functionality

2026-01-12 15:35:14 -05:00

lunchflow_entry

fix: add logic to skip future pending transactions and add cleanup ta… (#1011)

2026-02-19 18:58:01 +01:00

lunchflow_item

feat: process pending transactions from lunchflow (#731)

2026-01-23 00:53:24 +01:00

merchant

Merchants improvements (#594)

2026-01-09 19:38:04 +01:00

mercury_account

Mercury integration (#723)

2026-01-22 20:37:07 +01:00

mercury_entry

Mercury integration (#723)

2026-01-22 20:37:07 +01:00

mercury_item

Mercury integration (#723)

2026-01-22 20:37:07 +01:00

plaid_account

Providers sharing (#1273)

2026-03-25 17:47:04 +01:00

plaid_entry

Add pending transaction handling and duplicate reconciliation logic (#602)

2026-01-10 20:11:00 +01:00

plaid_item

Fix Plaid link script loading and first-sync account linking (#1165)

2026-03-13 08:11:51 +01:00

provider

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

provider_merchant

Provider merchants enhancement (#1254)

2026-03-23 12:34:43 +01:00

recurring_transaction

feat(recurring): allow marking transfers as recurring (#895) (#1589)

2026-05-12 00:37:47 +02:00

rule

Providers sharing (#1273)

2026-03-25 17:47:04 +01:00

security

Add binance security provider for crypto (#1424)

2026-04-10 15:43:22 +02:00

simplefin

Harden SimpleFin sync: retries, safer imports, manual relinking, and data-quality reconciliation (#544)

2026-01-05 22:11:47 +01:00

simplefin_account

Fix avg_cost to return per-share cost basis (#1692)

2026-05-07 23:31:26 +02:00

simplefin_entry

Harden SimpleFIN sync: protect user data, fix stuck syncs, optimize API calls (#671)

2026-01-16 12:34:06 +01:00

simplefin_item

SimpleFIN: setup UX + same-provider relink + card-replacement detection (#1493)

2026-04-18 09:50:34 +02:00

snaptrade_account

Add Interactive Brokers Provider (#1722)

2026-05-12 23:45:19 +02:00

snaptrade_item

Scope SnapTrade orphan cleanup to current family (#1769)

2026-05-12 12:17:00 +02:00

sophtron_account

Add Sophtron Provider (#596)

2026-04-19 11:16:04 +02:00

sophtron_entry

Add Sophtron Provider (#596)

2026-04-19 11:16:04 +02:00

sophtron_item

[codex] Add Sophtron manual sync fixes (#1714)

2026-05-09 21:55:20 +02:00

tool_call

Implement support for generic OpenAI api (#213)

2025-10-22 16:02:50 +02:00

trade

Expand financial providers (#1407)

2026-04-09 18:33:59 +02:00

transaction

Add Interactive Brokers Provider (#1722)

2026-05-12 23:45:19 +02:00

transfer

Add exchange rate feature with multi-currency transactions and transfers support (#1099)

2026-04-08 21:05:58 +02:00

valuation

Start and end balance anchors for historical account balances (#2455)

2025-07-15 11:42:41 -04:00

vector_store

feat(vector-store): Implement pgvector adapter for self-hosted RAG (#1211)

2026-03-20 17:01:31 +01:00

account_import.rb

feat: Support optional balance date column in account CSV imports (#736)

2026-01-22 15:25:43 +01:00

account_order.rb

Add customizable menu order for user accounts (#44)

2025-08-11 22:58:44 +02:00

account_provider.rb

Add (beta) CoinStats Crypto Wallet Integration with Balance and Transaction Syncing (#512)

2026-01-07 15:59:04 +01:00

account_share.rb

Family sharing (#1272)

2026-03-25 10:50:23 +01:00

account.rb

Add Interactive Brokers Provider (#1722)

2026-05-12 23:45:19 +02:00

address.rb

Fix: No comma when locality is empty (small fix) (#2111)

2025-04-16 20:26:45 -05:00

api_key.rb

Protect demo API key from deletion (#919)

2026-02-06 21:25:52 +01:00

application_record.rb

…

archived_export.rb

Add post-trial inactive Family cleanup with data archival (#1199)

2026-03-14 20:14:18 +01:00

assistant_message.rb

fix(chat): eager pending AssistantMessage to fix Turbo subscribe race (#1657) (#1658)

2026-05-03 20:33:29 +02:00

assistant.rb

Add external AI assistant with Pipelock security proxy (#1069)

2026-03-03 15:47:51 +01:00

auth_config.rb

fix: use ProviderLoader for AuthConfig.sso_providers when DB providers enabled\n\nAuthConfig.sso_providers only read from YAML config, so self-hosted\nsetups with DB-configured SSO providers (e.g. Authentik via admin UI)\nhad no SSO button on the login page.\n\nWire it to ProviderLoader.load_providers when FeatureFlags.db_sso_providers?\nis true, falling back to YAML config otherwise. (#1614)

2026-05-01 13:31:32 +02:00

balance_sheet.rb

Family sharing (#1272)

2026-03-25 10:50:23 +01:00

balance.rb

Use new balance components in activity feed (#2511)

2025-07-23 18:15:14 -04:00

binance_account.rb

Add Binance support, heavily inspired by the Coinbase one (#1317)

2026-04-07 14:43:17 +02:00

binance_item.rb

Add Binance support, heavily inspired by the Coinbase one (#1317)

2026-04-07 14:43:17 +02:00

brex_account.rb

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

brex_item.rb

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

budget_category.rb

Budget page refactor: split into(All - Over Budget - On Track) (#1195)

2026-04-13 20:03:55 +02:00

budget.rb

Hide nested budget categories in the Budget spent donut (#1544)

2026-04-23 21:28:38 +02:00

category_import.rb

feat(api): expose import row diagnostics (#1644)

2026-05-05 01:12:48 +02:00

category.rb

fix: add hex color validation to Category model and form (to solve #1247) (#1341)

2026-04-01 20:27:29 +02:00

chat.rb

fix(chat): eager pending AssistantMessage to fix Turbo subscribe race (#1657) (#1658)

2026-05-03 20:33:29 +02:00

coinbase_account.rb

feat: scope Mercury account uniqueness to mercury_item (#1032)

2026-03-19 15:17:55 +01:00

coinbase_item.rb

Refactor: Use Encryptable concern in CoinbaseItem (#1339)

2026-04-07 16:28:01 +02:00

coinstats_account.rb

Add CoinStats exchange portfolio sync and normalize linked investment charts (#1308)

2026-04-01 20:25:06 +02:00

coinstats_item.rb

Add CoinStats exchange portfolio sync and normalize linked investment charts (#1308)

2026-04-01 20:25:06 +02:00

credit_card.rb

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

crypto.rb

Add Coinbase exchange integration with CDP API support (#704)

2026-01-21 22:56:39 +01:00

current.rb

Family sharing (#1272)

2026-03-25 10:50:23 +01:00

data_enrichment.rb

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

depository.rb

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

enable_banking_account.rb

feat(enable-banking): enhance transaction import, metadata handling, and UI (#1406)

2026-04-10 23:19:48 +02:00

enable_banking_item.rb

feat(enable-banking): enhance transaction import, metadata handling, and UI (#1406)

2026-04-10 23:19:48 +02:00

entry_search.rb

fix: Lunchflow pending transaction duplicates, missing from search and filter (#859)

2026-02-01 23:48:54 +01:00

entry.rb

feat(splits): add exclusion support for splits and improve rendering (#1661)

2026-05-09 12:36:41 +02:00

entryable.rb

Fix NoMethodError on nil entryable in account activity feed (#1316)

2026-03-29 17:30:12 +02:00

exchange_rate_pair.rb

Add improvements from security providers to FX providers also (#1445)

2026-04-13 00:51:23 +02:00

exchange_rate.rb

Data provider simplification, tests, and documentation (#1997)

2025-03-17 11:54:53 -04:00

family_document.rb

Add Family vector search function call / support for document vault (#961)

2026-02-11 15:22:56 +01:00

family_export.rb

More rebranding changes (#159)

2025-09-24 00:19:51 +02:00

family_merchant_association.rb

Merchants improvements (#594)

2026-01-09 19:38:04 +01:00

family_merchant.rb

Implement a setting to retrieve high res logos (#725)

2026-01-21 17:16:51 +01:00

family.rb

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

holding.rb

Add Interactive Brokers Provider (#1722)

2026-05-12 23:45:19 +02:00

ibkr_account.rb

Add Interactive Brokers Provider (#1722)

2026-05-12 23:45:19 +02:00

ibkr_item.rb

Add Interactive Brokers Provider (#1722)

2026-05-12 23:45:19 +02:00

impersonation_session_log.rb

Impersonation (#1325)

2024-10-18 11:26:58 -05:00

impersonation_session.rb

Impersonation (#1325)

2024-10-18 11:26:58 -05:00

import.rb

feat(api): add import preflight validation (#1755)

2026-05-12 00:00:49 +02:00

income_statement.rb

Providers sharing (#1273)

2026-03-25 17:47:04 +01:00

indexa_capital_account.rb

feat: scope Mercury account uniqueness to mercury_item (#1032)

2026-03-19 15:17:55 +01:00

indexa_capital_item.rb

Include newer providers in automatic family sync (#934)

2026-02-10 23:42:22 +01:00

investment_flow_statement.rb

Family sharing (#1272)

2026-03-25 10:50:23 +01:00

investment_statement.rb

Investments currency fix (#1436)

2026-04-11 15:09:59 +02:00

investment.rb

feat(investments): add India investment subtypes and exchange support (#1659)

2026-05-05 01:04:29 +02:00

invitation.rb

Family sharing (#1272)

2026-03-25 10:50:23 +01:00

invite_code.rb

Initial security fixes (#461)

2026-01-23 22:05:28 +01:00

kraken_account.rb

feat(providers): add Kraken exchange sync (#1759)

2026-05-12 00:22:37 +02:00

kraken_item.rb

feat(providers): add Kraken exchange sync (#1759)

2026-05-12 00:22:37 +02:00

llm_usage.rb

Track failed LLM API calls in llm_usages table (#360)

2025-11-22 02:15:20 +01:00

loan.rb

Fix loan account subtype not persisting on create (#1491)

2026-04-18 00:06:24 +02:00

lunchflow_account.rb

feat: scope Mercury account uniqueness to mercury_item (#1032)

2026-03-19 15:17:55 +01:00

lunchflow_item.rb

Constrain Lunchflow base URL to trusted endpoint (#1768)

2026-05-12 12:18:17 +02:00

market_data_importer.rb

Expand financial providers (#1407)

2026-04-09 18:33:59 +02:00

measurement.rb

Vehicle view (#1117)

2024-08-23 09:33:42 -04:00

merchant.rb

Recurring transactions (#271)

2025-11-01 09:12:42 +01:00

mercury_account.rb

feat: scope Mercury account uniqueness to mercury_item (#1032)

2026-03-19 15:17:55 +01:00

mercury_item.rb

fix(mercury): support named multiple API connections (#1627)

2026-05-03 10:56:31 +02:00

message.rb

fix(chat): eager pending AssistantMessage to fix Turbo subscribe race (#1657) (#1658)

2026-05-03 20:33:29 +02:00

mint_import.rb

feat(api): add import preflight validation (#1755)

2026-05-12 00:00:49 +02:00

mobile_device.rb

Fix mobile login "Record not found" for unseeded instances (#916)

2026-02-06 18:04:29 +01:00

oidc_identity.rb

fix(sso): preserve user-edited name across OIDC logins (#1777)

2026-05-12 21:55:22 +02:00

other_asset.rb

New Design System + Codebase Refresh (#1823)

2025-02-21 11:57:59 -05:00

other_liability.rb

New Design System + Codebase Refresh (#1823)

2025-02-21 11:57:59 -05:00

pdf_import.rb

feat(api): expose import row diagnostics (#1644)

2026-05-05 01:12:48 +02:00

period.rb

Feature: remember value of chart period selector (#1528)

2026-04-21 19:02:41 +02:00

plaid_account.rb

feat: scope Mercury account uniqueness to mercury_item (#1032)

2026-03-19 15:17:55 +01:00

plaid_item.rb

Include newer providers in automatic family sync (#934)

2026-02-10 23:42:22 +01:00

property.rb

feat(investments): add India investment subtypes and exchange support (#1659)

2026-05-05 01:04:29 +02:00

provider_connection_status.rb

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

provider_merchant.rb

feat(sync): add Brex provider connections (#1752)

2026-05-13 18:13:48 +02:00

provider.rb

Improve account sync performance, handle concurrent market data syncing (#2236)

2025-05-15 10:19:56 -04:00

qif_import.rb

feat(api): expose import row diagnostics (#1644)

2026-05-05 01:12:48 +02:00

recurring_transaction.rb

feat(recurring): allow marking transfers as recurring (#895) (#1589)

2026-05-12 00:37:47 +02:00

rejected_transfer.rb

Account:: namespace simplifications and cleanup (#2110)

2025-04-14 11:40:34 -04:00

rule_import.rb

feat(api): expose import row diagnostics (#1644)

2026-05-05 01:12:48 +02:00

rule_run.rb

Add Recent Runs visibility for rule executions (#376)

2025-12-07 16:30:02 +01:00

rule.rb

Add Quick Categorize Wizard (#1386)

2026-04-07 11:24:50 +02:00

security.rb

Move back to brandfetch (#1427)

2026-04-10 17:42:16 +02:00

series.rb

- Handle blank series in trend method to avoid nil errors (#357)

2025-11-20 08:31:03 +01:00

session.rb

Initial security fixes (#461)

2026-01-23 22:05:28 +01:00

setting.rb

Rebase PR #784 and fix OpenAI model/chat regressions (#1384)

2026-04-15 18:45:24 +02:00

simplefin_account.rb

SimpleFIN: setup UX + same-provider relink + card-replacement detection (#1493)

2026-04-18 09:50:34 +02:00

simplefin_item.rb

Include newer providers in automatic family sync (#934)

2026-02-10 23:42:22 +01:00

snaptrade_account.rb

FIX schema drift and snaptrade and mercury issues (#1232)

2026-03-20 14:52:09 +01:00

snaptrade_item.rb

fix: send first-time SnapTrade users to connect flow (#1613)

2026-05-03 10:28:31 +02:00

sophtron_account.rb

[codex] Add Sophtron manual sync fixes (#1714)

2026-05-09 21:55:20 +02:00

sophtron_item.rb

[codex] Add Sophtron manual sync fixes (#1714)

2026-05-09 21:55:20 +02:00

sso_audit_log.rb

feat: comprehensive SSO/OIDC upgrade with enterprise features

2026-01-03 17:56:42 -05:00

sso_provider_tester.rb

fix(auth): surface exact OIDC issuer mismatches (#1666)

2026-05-05 00:47:45 +02:00

sso_provider.rb

Normalize legacy SSO icon values before validation (#955)

2026-02-10 23:14:58 +01:00

subscription.rb

fix: Show cancellation message when subscription is pending cancellation (#752)

2026-01-23 18:55:51 +01:00

sure_import.rb

feat(api): add import preflight validation (#1755)

2026-05-12 00:00:49 +02:00

sync.rb

feat(api): expose sync status (#1635)

2026-05-06 22:02:21 +02:00

tag.rb

feat: Add tag badge in filter window (#1038)

2026-02-23 17:43:00 -05:00

tagging.rb

…

tool_call.rb

Personal finance AI (v1) (#2022)

2025-03-28 13:08:22 -04:00

trade_import.rb

Improve investment activity labels UX and add convert-to-trade feature (#649)

2026-01-16 21:04:10 +01:00

trade.rb

Add Interactive Brokers Provider (#1722)

2026-05-12 23:45:19 +02:00

transaction_import.rb

Harden SimpleFIN sync: protect user data, fix stuck syncs, optimize API calls (#671)

2026-01-16 12:34:06 +01:00

transaction.rb

Add Interactive Brokers Provider (#1722)

2026-05-12 23:45:19 +02:00

transfer.rb

Add investment activity detection, labels, and exclusions

2026-01-12 15:35:14 -05:00

trend.rb

New Design System + Codebase Refresh (#1823)

2025-02-21 11:57:59 -05:00

user_message.rb

fix(chat): eager pending AssistantMessage to fix Turbo subscribe race (#1657) (#1658)

2026-05-03 20:33:29 +02:00

user.rb

fix(auth): hash MFA backup codes (#1629)

2026-05-05 01:20:57 +02:00

valuation.rb

Start and end balance anchors for historical account balances (#2455)

2025-07-15 11:42:41 -04:00

vector_store.rb

Add Family vector search function call / support for document vault (#961)

2026-02-11 15:22:56 +01:00

vehicle.rb

Account:: namespace simplifications and cleanup (#2110)

2025-04-14 11:40:34 -04:00

webauthn_credential.rb

feat(auth): add WebAuthn MFA credentials (#1628)

2026-05-03 22:13:28 +02:00